In message <prayer.1.3.1.0905191531050.23...@hermes-2.csi.cam.ac.uk>, Chris Tho mpson writes: > > So what are the TYPE65535 records actually for? > > Thanks to Evan Hunt and Mark Andrews for their replies. > > As I now understand it, then, TYPE65535 (or TYPE65534 - I would have seen > those as well if they had been created) RRs are used for initial signing > with a key, or removing signatures for a deleted key, but are not required > or used when resigning.
re-signing (resigning has a different meaning) uses the expiration field in the RRSIGs to workout when a particular RRset need to be re-signed. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: mark_andr...@isc.org _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users